CVEs published in April 2026
6,215 vulnerabilities, 624 critical, 20 exploited.
- python software foundation cpythonOut-of-bounds write in Windows asyncio.ProacterEventLoop.sock_recvfrom_into() when using nbytes8.8 High
- semantic mediawiki mediawikiReflected Cross-Site Scripting (XSS) in Semantic MediaWiki5.1 Medium
- hcl software bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryption5.3 Medium
- civetwebSearch path without quotes in CivetWeb8.5 High
- fortra goanywhere mft, goanywhere managed file transfer +1 moreUser‑Controlled HTTP Header In Fortra's GoAnywhere MFT Allows Arbitrary DNS Lookups6.5 Medium
- fortra goanywhere mft, goanywhere managed file transfer +1 moreHTML Injection possible in system generated emails in Fortra's GoAnywhere MFT5.4 Medium
- fortra goanywhere mft, goanywhere managed file transfer +1 moreGoAnywhere MFT SAML Sessions do not redirect to logout URL on session timeout4.3 Medium
- fortra goanywhere mft, goanywhere managed file transfer +1 moreGoAnywhere MFT SFTP Service Login Vulnerable to Brute Force Attack Under Certain Circumstances7.3 High
- fortra goanywhere mft, goanywhere agents, goanywhere managed file transfer +2 moreEncryption vulnerable to brute-force decryption in GoAnywhere MFT5.8 Medium
- hcl software bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is susceptible to HTTP Request Smuggling3.7 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreLibxpm: libxpm: denial of service via out-of-bounds read in xpm file parsing5.5 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreMemory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 1507.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreMemory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 1507.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreMemory safety bugs fixed in Firefox 150 and Thunderbird 1507.5 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions, integer overflow in the Audio/Video: Playback component5.3 Medium
- mozilla firefox, thunderbird +1 moreInformation disclosure in the IP Protection component7.5 High
- mozilla firefox, thunderbird +1 moreDenial-of-service in the Audio/Video: Playback component7.5 High
- mozilla firefox, thunderbird +1 moreDenial-of-service in the Audio/Video: Playback component7.5 High
- mozilla firefox, thunderbird +1 moreOther issue in the JavaScript Engine component5.3 Medium
- mozilla firefox, thunderbird +1 moreInvalid pointer in the Audio/Video: Playback component5.3 Medium
- mozilla firefox, thunderbird +1 moreOther issue in the Networking: DNS component5.3 Medium
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the WebRTC: Networking component7.8 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the WebRTC component5.3 Medium
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Security component5.4 Medium
- mozilla firefox, thunderbird +1 moreDenial-of-service due to integer overflow in the Graphics: WebGPU component7.5 High
- freepbx apiFreePBX api module Command Injection via GraphQL8.6 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Libraries component in NSS7.5 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Security component9.8 Critical
- mozilla firefox, thunderbird +1 moreOther issue in the Storage: IndexedDB component6.5 Medium
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Debugger component8.8 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Networking: Cookies component9.8 Critical
- mozilla firefox, thunderbird +1 moreOther issue in the Libraries component in NSS5.3 Medium
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Libraries component in NSS7.5 High
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Form Autofill component5.3 Medium
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the DOM: Device Interfaces component6.5 Medium
- mozilla firefox, thunderbird +1 moreMitigation bypass in the File Handling component6.5 Medium
- mozilla firefox, thunderbird +1 moreSpoofing issue in the DOM: Core & HTML component6.3 Medium
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Networking component8.8 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Networking: Cookies component9.8 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the Widget: Cocoa component7.5 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: WebAssembly component7.5 High
- mozilla firefox, thunderbird +1 moreInvalid pointer in the JavaScript: WebAssembly component6.3 Medium
- mozilla firefoxMitigation bypass in Firefox for Android7.5 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: postMessage component6.5 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreUse-after-free in the JavaScript Engine component7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreIncorrect boundary conditions in the WebRTC component7.3 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreIncorrect boundary conditions in the WebRTC component7.3 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreUninitialized memory in the Audio/Video: Web Codecs component7.3 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 morePrivilege escalation in the Graphics: WebRender component8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreInformation disclosure due to uninitialized memory in the Graphics: Canvas2D component7.5 High
- Show moreLoading…